I expect you could mitigate 9 out of 10 breeches by staff not giving out their teams shared admin password (which is password123) over the phone to someone who

I expect you could mitigate 9 out of 10 breeches by staff not giving out their teams shared admin password (which is password123) over the phone to someone who says they are Jim from the CEOs office who needs to check some numbers for the big presentation tomorrow.